Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users
A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
RHSA-2026:67165: Important: openssl security, bug fix, and enhancement update
An update for openssl is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has
Hackers Abuse YouTube Gaming Channels and SEO Poisoning to Deploy RATs and Chrome Hijacker
Hackers are turning ordinary searches and gaming videos into malware traps. A long-running campaign used YouTube channels and
ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like Attacks
The flaw allows attackers to send files and execute them without authorization through an active remote session. The
Microsoft: September updates break audio on some Windows PCs
Microsoft has confirmed that USB audio devices may fail on some Windows systems after installing the KB5124008and KB5124012
RHSA-2026:67154: Important: openssl security, bug fix, and enhancement update
An update for openssl is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has
RHSA-2026:67146: Important: python-tornado security update
An update for python-tornado is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has
RHSA-2026:67166: Important: postgresql18-postgis security update
An update for postgresql18-postgis is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has
Hackers Abuse AutoIt to Inject AsyncRAT Into Microsoft-Signed Windows Process
Hackers are using a familiar Windows automation tool to hide AsyncRAT, a remote-access trojan, inside a trusted system
CISA: Hackers now exploit max severity GitLab flaw in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are now exploiting a maximum-severity GitLab vulnerability
USN-8751-1: Urwid vulnerabilities
Katriel Moses discovered that Urwid used a weak PRNG. A local attacker could possibly use this issue to
USN-8750-1: FFmpeg vulnerabilities
Seung Min Shin discovered that FFmpeg did not correctly handle certain memory operations. If a user or automated